Overview

overview

10

Static

static

1

MAXQDA24_S...1).msi

windows7-x64

7

MAXQDA24_S...1).msi

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    MAXQDA24_Setup (1).msi

  • Size

    375.0MB

  • Sample

    240125-vfga1abhhl

  • MD5

    11d8956afe36cefadfdeace4cc17326a

  • SHA1

    5b0505b3d371710867bad82e12f6add9169303a6

  • SHA256

    7b248e7cb7eda9cb1639260a4d8a83e32c9f398c80d64d71922ccaf730a3dddd

  • SHA512

    f72293a22f831154f1591f779a2de6432af45d9368c70fb92b7758c4431e0e3d7e30a039f87d1fe1ce05710993b40aa07facc57cf8a9f7d516b05182de743f39

  • SSDEEP

    6291456:OSC5MXpntxbeRwAQiRME+iEYl/P3co+HC2dfezUKirtsYSrJeZfvf+k3O/u89kvU:pC5M5nLb9AOrUVco+zdHKcts/rcfvfbg

Score
10/10
kinsingloader

Malware Config

Targets

    • Target

      MAXQDA24_Setup (1).msi

    • Size

      375.0MB

    • MD5

      11d8956afe36cefadfdeace4cc17326a

    • SHA1

      5b0505b3d371710867bad82e12f6add9169303a6

    • SHA256

      7b248e7cb7eda9cb1639260a4d8a83e32c9f398c80d64d71922ccaf730a3dddd

    • SHA512

      f72293a22f831154f1591f779a2de6432af45d9368c70fb92b7758c4431e0e3d7e30a039f87d1fe1ce05710993b40aa07facc57cf8a9f7d516b05182de743f39

    • SSDEEP

      6291456:OSC5MXpntxbeRwAQiRME+iEYl/P3co+HC2dfezUKirtsYSrJeZfvf+k3O/u89kvU:pC5M5nLb9AOrUVco+zdHKcts/rcfvfbg

    Score
    10/10
    kinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Loads dropped DLL

    • Blocklisted process makes network request

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks